Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update

**Executive summary:** Microsoft’s August security update addresses 90 vulnerabilities, several rated critical and multiple zero-days actively exploited in the wild (notably CVE-2024-38189, CVE-2024-38178, CVE-2024-38106/38107/38193 and CVE-2024-38213), while CVE-2024-38202 remains unpatched and can be chained with other flaws (e.g., CVE-2024-21302) to roll back updates or escalate privileges; affected scenarios include environments allowing Internet-facing macros, Internet Explorer mode, and systems relying on Virtualization Based Security.